🇺🇸
Zandro
2026-11-14 04:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-13 15:21:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:21:03.954594 2026] [security2:error] [pid 5440:tid 5440] [client 185.61.219.22:47115] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:21:03.954594 2026] [security2:error] [pid 5440:tid 5440] [client 185.61.219.22:47115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/3e8bddb381ab8aff862566bd000abc73/a22ddcf9997bdb90862564530002f655_7b4ad6db.html"] [unique_id "avcq37izU-T3aJ1IQMbqlwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 08:03:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:03:11.570622 2026] [security2:error] [pid 32660:tid 32660] [client 185.61.219.22:13661] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:03:11.570622 2026] [security2:error] [pid 32660:tid 32660] [client 185.61.219.22:13661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/chew2009/bright"] [unique_id "avVyvzqctuayYW8TRPjNTwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:17:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:17:31.477074 2026] [security2:error] [pid 2561:tid 2561] [client 185.61.219.22:19047] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:17:31.477074 2026] [security2:error] [pid 2561:tid 2561] [client 185.61.219.22:19047] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/the-second-most-useful-graph-ever"] [unique_id "auug60z7ll2ahkOpdbgW5wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 14:00:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:00:04.688536 2026] [security2:error] [pid 17863:tid 17947] [client 185.61.219.22:58945] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:00:04.688536 2026] [security2:error] [pid 17863:tid 17947] [client 185.61.219.22:58945] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||truthjusticecommission.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "truthjusticecommission.com"] [uri "/World-Ethnic-Groups.html"] [unique_id "auH_5HaG1lQnEVxriB5SpAAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 12:51:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:50:55.590594 2026] [security2:error] [pid 4880:tid 4880] [client 185.61.219.22:38623] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.219.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:50:55.590594 2026] [security2:error] [pid 4880:tid 4880] [client 185.61.219.22:38623] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||microscopedia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "microscopedia.com"] [uri "/Resource/Microscopy/EBSD"] [unique_id "auHvr2a2copJpBIODyKGUgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-04 22:23:34
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-20 05:59:05
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇩🇪
kjaerulff
2026-05-19 13:38:18
UTC ·
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
UTC ·
(9 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2025-12-27 13:45:08
UTC ·
(10 months ago)
Probing for Exploits
Exploited Host
Web App Attack
2025-11-24 01:34:44
UTC ·
(11 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-03-28 09:29:17
UTC ·
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 04:26:18
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇨🇦
wil.com
2025-03-28 08:31:16
UTC ·
(1 year ago)
GlobalProtect login attempts with user SSANGUINET.
VPN IP
Brute-Force
🇨🇭
backslash
2025-03-06 00:35:04
UTC ·
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
